coss-particles

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.80). The skill explicitly instructs the agent to fetch particle JSON manifests at runtime (e.g., https://coss.com/ui/r/.json and example https://coss.com/ui/r/p-accordion-1.json), which will retrieve external source code that is injected into the skill's runtime outputs.